The Big Tesla Hack: A hacker gained control over the entire fleet

Re:The Big Tesla Hack: A hacker gained control over the enti... by pydry on Monday August 31, 2020 @07:03AM (#24330169)

I rather thought it was honesty that kept it from being bid on by bad guys. Even if they wouldn't bid more it's a big risk to pay so low.

It's kind of a treasure trove to be able to read all passwords from a user of lastpass simply by showing them a website.

It made me think that the next zero day on lastpass would probably be sold to someone else.

[ Parent | on HN ]

Re:The Big Tesla Hack: A hacker gained control over the enti... by tptacek on Monday August 31, 2020 @11:46AM (#24332611)

Who would buy it? That's the question I'm asking.

[ Parent | on HN ]

Re:The Big Tesla Hack: A hacker gained control over the enti... by pydry on Tuesday September 01, 2020 @12:56PM (#24343850)

Scammers, fraudsters, governments

[ Parent | on HN ]

Re:The Big Tesla Hack: A hacker gained control over the enti... by tptacek on Wednesday September 02, 2020 @01:26AM (#24350223)

Tell a story about the "scammer" or "fraudster" that buys this. What do they do with it? What do they win, how many times do they win it, and with what likelihood of success? How much work goes into realizing value from the vulnerability before they get their first dollar, or whatever it is they're getting? Is that work already done, or do they have to do it speculatively on this one vulnerability?

Reason your way through it all the way, and you'll see why real vulnerabilities sold on darker markets are paid in tranches, and why nobody pays real money for one-off serversides.

[ Parent | on HN ]